Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/2F20ECAE554211EF82D40732C4F9AE02.roa
File: 2F20ECAE554211EF82D40732C4F9AE02.roa (raw, json)
Hash identifier: ARFGvtWgIhsDD88anAt/fT68RSG6NvFwb2tGcNJ0NZM=
Subject key identifier: A7:37:15:3C:B4:C5:6E:BF:DD:85:C3:AB:EC:60:6B:B6:DA:81:5E:69
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 36A8
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/2F20ECAE554211EF82D40732C4F9AE02.roa
Signing time: Wed 30 Sep 2026 16:17:22 +0000
ROA not before: Wed 30 Sep 2026 16:17:22 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 55824
IP address blocks: 14.139.0.0/16 maxlen: 16
14.139.0.0/19 maxlen: 19
14.139.0.0/23 maxlen: 23
14.139.3.0/24 maxlen: 24
14.139.4.0/24 maxlen: 24
14.139.5.0/24 maxlen: 24
14.139.6.0/23 maxlen: 23
14.139.8.0/24 maxlen: 24
14.139.9.0/24 maxlen: 24
14.139.10.0/24 maxlen: 24
14.139.11.0/24 maxlen: 24
14.139.12.0/24 maxlen: 24
14.139.13.0/24 maxlen: 24
14.139.14.0/24 maxlen: 24
14.139.16.0/20 maxlen: 20
14.139.32.0/19 maxlen: 19
14.139.32.0/24 maxlen: 24
14.139.33.0/24 maxlen: 24
14.139.34.0/24 maxlen: 24
14.139.35.0/24 maxlen: 24
14.139.36.0/24 maxlen: 24
14.139.37.0/24 maxlen: 24
14.139.38.0/24 maxlen: 24
14.139.39.0/24 maxlen: 24
14.139.40.0/21 maxlen: 24
14.139.48.0/20 maxlen: 24
14.139.64.0/18 maxlen: 24
14.139.128.0/19 maxlen: 19
14.139.128.0/20 maxlen: 24
14.139.144.0/21 maxlen: 24
14.139.152.0/22 maxlen: 22
14.139.156.0/23 maxlen: 23
14.139.158.0/24 maxlen: 24
14.139.159.0/24 maxlen: 24
14.139.160.0/19 maxlen: 19
14.139.160.0/24 maxlen: 24
14.139.161.0/24 maxlen: 24
14.139.162.0/24 maxlen: 24
14.139.163.0/24 maxlen: 24
14.139.164.0/22 maxlen: 22
14.139.168.0/21 maxlen: 21
14.139.176.0/21 maxlen: 21
14.139.184.0/24 maxlen: 24
14.139.185.0/24 maxlen: 24
14.139.186.0/24 maxlen: 24
14.139.187.0/24 maxlen: 24
14.139.188.0/22 maxlen: 22
14.139.192.0/19 maxlen: 19
14.139.192.0/20 maxlen: 20
14.139.192.0/24 maxlen: 24
14.139.193.0/24 maxlen: 24
14.139.194.0/24 maxlen: 24
14.139.195.0/24 maxlen: 24
14.139.196.0/23 maxlen: 23
14.139.198.0/24 maxlen: 24
14.139.199.0/24 maxlen: 24
14.139.200.0/21 maxlen: 24
14.139.208.0/20 maxlen: 20
14.139.208.0/21 maxlen: 21
14.139.208.0/23 maxlen: 23
14.139.208.0/24 maxlen: 24
14.139.210.0/24 maxlen: 24
14.139.211.0/24 maxlen: 24
14.139.212.0/23 maxlen: 23
14.139.212.0/24 maxlen: 24
14.139.213.0/24 maxlen: 24
14.139.214.0/23 maxlen: 23
14.139.216.0/21 maxlen: 21
14.139.216.0/24 maxlen: 24
14.139.217.0/24 maxlen: 24
14.139.218.0/23 maxlen: 23
14.139.220.0/24 maxlen: 24
14.139.221.0/24 maxlen: 24
14.139.222.0/24 maxlen: 24
14.139.223.0/24 maxlen: 24
14.139.224.0/19 maxlen: 19
14.139.224.0/24 maxlen: 24
14.139.225.0/24 maxlen: 24
14.139.226.0/24 maxlen: 24
14.139.227.0/24 maxlen: 24
14.139.228.0/24 maxlen: 24
14.139.229.0/24 maxlen: 24
14.139.230.0/24 maxlen: 24
14.139.231.0/24 maxlen: 24
14.139.232.0/24 maxlen: 24
14.139.233.0/24 maxlen: 24
14.139.234.0/24 maxlen: 24
14.139.235.0/24 maxlen: 24
14.139.236.0/24 maxlen: 24
14.139.237.0/24 maxlen: 24
14.139.238.0/24 maxlen: 24
14.139.239.0/24 maxlen: 24
14.139.240.0/24 maxlen: 24
14.139.241.0/24 maxlen: 24
14.139.242.0/24 maxlen: 24
14.139.243.0/24 maxlen: 24
14.139.244.0/24 maxlen: 24
14.139.245.0/24 maxlen: 24
14.139.246.0/23 maxlen: 24
14.139.248.0/24 maxlen: 24
14.139.249.0/24 maxlen: 24
14.139.250.0/24 maxlen: 24
14.139.251.0/24 maxlen: 24
14.139.252.0/23 maxlen: 23
14.139.253.0/24 maxlen: 24
14.139.254.0/24 maxlen: 24
14.139.255.0/24 maxlen: 24
180.149.48.0/20 maxlen: 20
180.149.48.0/24 maxlen: 24
180.149.49.0/24 maxlen: 24
180.149.51.0/24 maxlen: 24
180.149.52.0/24 maxlen: 24
180.149.54.0/24 maxlen: 24
180.149.55.0/24 maxlen: 24
180.149.56.0/24 maxlen: 24
180.149.57.0/24 maxlen: 24
180.149.59.0/24 maxlen: 24
180.149.60.0/24 maxlen: 24
180.149.61.0/24 maxlen: 24
180.149.62.0/24 maxlen: 24
180.149.63.0/24 maxlen: 24
2405:8a00::/32 maxlen: 32
2405:8a00:a::/48 maxlen: 48
2405:8a00:14::/48 maxlen: 48
2405:8a00:15::/48 maxlen: 48
2405:8a00:1a::/48 maxlen: 48
2405:8a00:aa::/48 maxlen: 48
2405:8a00:bb::/48 maxlen: 48
2405:8a00:2002::/48 maxlen: 48
2405:8a00:200a::/48 maxlen: 48
2405:8a00:2021::/48 maxlen: 48
2405:8a00:2039::/48 maxlen: 48
2405:8a00:2063::/48 maxlen: 48
2405:8a00:2072::/48 maxlen: 48
2405:8a00:2077::/48 maxlen: 48
2405:8a00:2078::/48 maxlen: 48
2405:8a00:2090::/48 maxlen: 48
2405:8a00:20c3::/48 maxlen: 48
2405:8a00:20d9::/48 maxlen: 48
2405:8a00:20da::/48 maxlen: 48
2405:8a00:20db::/48 maxlen: 48
2405:8a00:20dc::/48 maxlen: 48
2405:8a00:20dd::/48 maxlen: 48
2405:8a00:20de::/48 maxlen: 48
2405:8a00:20df::/48 maxlen: 48
2405:8a00:20e0::/48 maxlen: 48
2405:8a00:20e1::/48 maxlen: 48
2405:8a00:20e2::/48 maxlen: 48
2405:8a00:20e3::/48 maxlen: 48
2405:8a00:20e5::/48 maxlen: 48
2405:8a00:20e6::/48 maxlen: 48
2405:8a00:20e7::/48 maxlen: 48
2405:8a00:20e8::/48 maxlen: 48
2405:8a00:20f3::/48 maxlen: 48
2405:8a00:210c::/48 maxlen: 48
2405:8a00:2110::/48 maxlen: 48
2405:8a00:217e::/48 maxlen: 48
2405:8a00:21a5::/48 maxlen: 48
2405:8a00:21b1::/48 maxlen: 48
2405:8a00:21b3::/48 maxlen: 48
2405:8a00:21b4::/48 maxlen: 48
2405:8a00:21b5::/48 maxlen: 48
2405:8a00:21bd::/48 maxlen: 48
2405:8a00:4001::/48 maxlen: 48
2405:8a00:400d::/48 maxlen: 48
2405:8a00:4014::/48 maxlen: 48
2405:8a00:401d::/48 maxlen: 48
2405:8a00:401e::/48 maxlen: 48
2405:8a00:401f::/48 maxlen: 48
2405:8a00:4020::/48 maxlen: 48
2405:8a00:4021::/48 maxlen: 48
2405:8a00:6013::/48 maxlen: 48
2405:8a00:6016::/48 maxlen: 48
2405:8a00:601c::/48 maxlen: 48
2405:8a00:602e::/48 maxlen: 48
2405:8a00:602f::/48 maxlen: 48
2405:8a00:6035::/48 maxlen: 48
2405:8a00:6036::/48 maxlen: 48
2405:8a00:6037::/48 maxlen: 48
2405:8a00:6038::/48 maxlen: 48
2405:8a00:6039::/48 maxlen: 48
2405:8a00:603a::/48 maxlen: 48
2405:8a00:8001::/48 maxlen: 48
2405:8a00:8016::/48 maxlen: 48
2405:8a00:801b::/48 maxlen: 48
2405:8a00:801c::/48 maxlen: 48
2405:8a00:801f::/48 maxlen: 48
2405:8a00:8020::/48 maxlen: 48
2405:8a00:8021::/48 maxlen: 48
2405:8a00:8022::/48 maxlen: 48
2405:8a00:8024::/48 maxlen: 48
2405:8a00:8027::/48 maxlen: 48
2405:8a00:802f::/48 maxlen: 48
2405:8a00:8031::/48 maxlen: 48
2405:8a00:8032::/48 maxlen: 48
2405:8a00:8033::/48 maxlen: 48
2405:8a00:8035::/48 maxlen: 48
2405:8a00:8036::/48 maxlen: 48
2405:8a00:a001::/48 maxlen: 48
2405:8a00:a00d::/48 maxlen: 48
2405:8a00:a01b::/48 maxlen: 48
2405:8a00:a01d::/48 maxlen: 48
2405:8a00:a027::/48 maxlen: 48
2405:8a00:a031::/48 maxlen: 48
2405:8a00:a048::/48 maxlen: 48
2405:8a00:a04b::/48 maxlen: 48
2405:8a00:a04c::/48 maxlen: 48
2405:8a00:a052::/48 maxlen: 48
2405:8a00:a054::/48 maxlen: 48
2405:8a00:a056::/48 maxlen: 48
2405:8a00:c012::/48 maxlen: 48
2405:8a00:c01a::/48 maxlen: 48
2405:8a00:c01b::/48 maxlen: 48
2405:8a00:c01c::/48 maxlen: 48
2405:8a00:c01f::/48 maxlen: 48
2405:8a00:c020::/48 maxlen: 48
2405:8a00:c021::/48 maxlen: 48
2405:8a00:c022::/48 maxlen: 48
2405:8a00:c023::/48 maxlen: 48
2405:8a00:c024::/48 maxlen: 48
2405:8a00:c025::/48 maxlen: 48
2405:8a00:c026::/48 maxlen: 48
2405:8a00:c027::/48 maxlen: 48
2409::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 15:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13992 (0x36a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Sep 30 16:17:22 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd3612-b217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:63:59:af:b4:92:8e:21:b4:42:4b:8f:a0:
d1:68:cf:29:24:f0:77:50:1e:3b:a2:61:5d:46:9a:
3b:e4:66:89:8b:88:e8:68:34:3b:6b:3e:a7:f4:35:
82:5f:4c:17:c1:20:df:c7:2e:74:ab:f2:00:19:49:
9c:20:cf:bf:3d:49:90:3d:53:ad:ca:7b:ef:f2:79:
3f:83:c1:55:ae:99:40:54:9e:c7:77:fd:15:2c:20:
68:28:7c:f0:53:a4:c9:55:5d:c6:9e:98:be:9c:7d:
a5:0f:0f:3a:4d:a9:39:c3:3f:d2:64:52:ce:5a:05:
8d:5b:e3:c5:a0:1e:d8:fe:bd:6e:4c:90:76:81:54:
ff:45:d2:2d:da:d1:1a:dd:ba:1e:2e:c7:87:a0:cf:
b9:8e:54:0d:c4:c7:ba:34:09:ec:a1:e7:f7:e2:bb:
6b:8c:c3:f4:da:c7:5f:be:ef:00:51:fa:cd:b2:69:
7f:11:4d:32:e0:94:7b:9f:92:ac:b5:55:8b:19:00:
28:89:b5:c0:8a:b1:e0:f7:8c:60:6d:3b:9f:fd:3a:
07:e7:ec:48:38:78:8f:d5:df:63:2f:bb:35:b6:33:
99:8c:27:68:3a:ba:1d:e3:8c:d4:a5:a2:b6:84:0c:
39:b5:33:be:c9:d7:f0:1f:2f:bc:23:e4:cd:b8:6a:
0e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:37:15:3C:B4:C5:6E:BF:DD:85:C3:AB:EC:60:6B:B6:DA:81:5E:69
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/2F20ECAE554211EF82D40732C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.139.0.0/16
180.149.48.0/20
IPv6:
2405:8a00::/32
2409::/28
Signature Algorithm: sha256WithRSAEncryption
c2:81:0c:a4:64:1e:42:cd:3f:6f:f1:f2:37:e7:87:0d:f2:85:
e9:c2:f5:07:73:a3:cf:00:98:98:85:40:1a:ea:88:28:78:49:
9a:5a:c2:0b:79:84:d5:c3:12:f3:e6:bc:eb:62:c5:c7:e7:7a:
4d:dc:7d:f4:62:99:02:68:39:90:a1:60:b8:e0:c7:c8:f9:95:
55:29:2b:8a:33:b7:03:ea:5d:ed:7b:33:52:8b:ac:f5:6c:2a:
c5:23:75:08:9e:de:49:25:98:a3:48:d7:b2:be:50:0e:8f:c0:
58:de:a5:ee:d3:a6:47:bb:da:74:e9:70:42:d9:78:06:e9:ca:
79:47:94:d2:43:45:c6:91:a2:7a:62:67:82:87:90:21:48:40:
49:68:68:e6:5d:73:13:2e:6e:b9:f7:03:da:bd:7f:96:6e:c1:
21:89:73:34:47:95:88:d2:91:2a:0a:3d:4a:1d:10:d5:f8:99:
e8:75:75:37:ee:60:53:c6:90:5f:97:f7:a3:ee:16:d4:31:38:
4f:da:3c:e4:65:38:6a:22:a0:e1:68:88:a2:93:95:22:8c:d6:
40:ae:60:c9:75:de:cf:56:cf:cb:09:90:1b:29:97:d1:02:27:
fb:17:61:25:d9:52:7f:7f:a5:34:b7:8f:40:6f:67:aa:ab:8b:
88:52:0d:39
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICNqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3
QTQ3QTVGMDkwHhcNMjYwOTMwMTYxNzIyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkMzYxMi1iMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApM5jWa+0ko4htEJLj6DRaM8pJPB3UB47omFdRpo75GaJi4joaDQ7az6n9DWC
X0wXwSDfxy50q/IAGUmcIM+/PUmQPVOtynvv8nk/g8FVrplAVJ7Hd/0VLCBoKHzw
U6TJVV3Gnpi+nH2lDw86Tak5wz/SZFLOWgWNW+PFoB7Y/r1uTJB2gVT/RdIt2tEa
3boeLseHoM+5jlQNxMe6NAnsoef34rtrjMP02sdfvu8AUfrNsml/EU0y4JR7n5Ks
tVWLGQAoibXAirHg94xgbTuf/ToH5+xIOHiP1d9jL7s1tjOZjCdoOrod44zUpaK2
hAw5tTO+ydfwHy+8I+TNuGoOuwIDAQABo4ICezCCAncwHQYDVR0OBBYEFKc3FTy0
xW6/3YXDq+xga7bagV5pMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1
MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvMkYyMEVDQUU1
NTQyMTFFRjgyRDQwNzMyQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAR
BAIAATALAwMADosDBAS0lTAwFAQCAAIwDgMFACQFigADBQQkCQAAMA0GCSqGSIb3
DQEBCwUAA4IBAQDCgQykZB5CzT9v8fI354cN8oXpwvUHc6PPAJiYhUAa6ogoeEma
WsILeYTVwxLz5rzrYsXH53pN3H30YpkCaDmQoWC44MfI+ZVVKSuKM7cD6l3tezNS
i6z1bCrFI3UInt5JJZijSNeyvlAOj8BY3qXu06ZHu9p06XBC2XgG6cp5R5TSQ0XG
kaJ6YmeCh5AhSEBJaGjmXXMTLm659wPavX+WbsEhiXM0R5WI0pEqCj1KHRDV+Jno
dXU37mBTxpBfl/ej7hbUMThP2jzkZThqIqDhaIiik5UijNZArmDJdd7PVs/LCZAb
KZfRAif7F2El2VJ/f6U0t49Ab2eqq4uIUg05
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:51:40 2026 by rpki-client